Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
File: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft (raw, json)
Hash identifier: XbNNcU0LM15O1jmw+kwctZtvZhtt75NHjUtfh6ymd1E=
Subject key identifier: 84:1E:CC:BA:27:9B:92:D7:CD:6F:6F:41:87:2C:F9:2B:3B:9F:15:35
Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Certificate serial: 019D33764E6BAE2D5159B09184B96EFA7508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
Manifest number: 044A
Signing time: Sat 28 Mar 2026 08:01:24 +0000
Manifest this update: Sat 28 Mar 2026 08:01:24 +0000
Manifest next update: Sun 29 Mar 2026 08:01:24 +0000
Files and hashes: 1: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl (hash: Nrqh6Wr5v6Q3uv43YH5yiehXMuPjTU4ebKKFmxHr2zw=)
2: o8MqcHzucQsFFcM064UV8vGpwI8.roa (hash: 7pKszhiXxG9eq/C8SaAv1aRWIQRMOmuuO6Lbmdi5cKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:4e:6b:ae:2d:51:59:b0:91:84:b9:6e:fa:75:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Validity
Not Before: Mar 28 08:01:24 2026 GMT
Not After : Mar 29 08:01:24 2026 GMT
Subject: CN=841eccba279b92d7cd6f6f41872cf92b3b9f1535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:46:8b:73:96:49:61:ec:50:72:bf:2a:45:
58:99:e0:a6:62:5c:ae:00:c1:5b:c0:e8:3f:c3:cf:
4e:26:d8:7d:cf:bd:6e:06:be:3a:91:0c:52:b4:8f:
9d:35:d6:2d:a5:f7:64:d8:7b:fe:eb:99:ab:01:67:
1b:29:e0:7c:ff:3d:aa:c7:e8:b1:9d:32:de:90:e0:
bb:8f:e6:1f:18:fa:e5:71:52:3b:a2:f5:51:1c:79:
a2:10:35:17:9d:24:da:c0:26:9d:6e:b6:9d:a5:f5:
16:22:93:4c:7d:f2:11:d6:a3:aa:a8:e1:03:b9:6a:
c5:72:f9:08:55:51:62:27:50:70:5d:30:f0:6a:f7:
e1:44:86:e1:df:52:02:af:cb:74:0f:cf:2d:3c:14:
fb:44:36:d9:d4:a1:5d:cf:b3:8a:71:63:50:2b:bc:
8d:1e:57:b9:39:80:24:21:d4:a5:8c:7d:50:5c:fd:
17:c5:70:88:83:6f:06:8f:39:74:fd:8b:bc:0f:60:
f2:7a:e3:7d:83:ac:57:a4:00:e2:c5:99:21:50:17:
a8:c1:96:9c:46:38:67:e0:c3:e9:f9:4c:69:5d:fd:
e6:29:5c:7d:b7:8c:ba:1c:a7:15:69:da:13:cc:b2:
5c:ff:6b:ac:f2:bf:33:69:79:7a:19:5e:7a:ed:02:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1E:CC:BA:27:9B:92:D7:CD:6F:6F:41:87:2C:F9:2B:3B:9F:15:35
X509v3 Authority Key Identifier:
keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5c:f0:98:82:4a:67:05:70:93:af:a7:e3:93:2e:ee:14:67:
7f:a5:73:30:99:b5:e3:be:8b:b3:4e:24:3b:60:fe:fb:5b:b8:
52:e5:0e:93:84:bc:6b:24:f1:89:65:c5:06:d2:0a:8f:89:43:
89:f0:6b:df:e8:48:cb:d4:00:1d:f0:d6:98:7c:64:16:a4:f2:
16:69:43:2c:7a:1b:9d:11:29:0a:e4:16:6b:e5:f2:90:33:02:
fd:f9:82:bd:37:56:54:22:c7:e7:7c:11:2a:51:0a:0c:5a:d1:
5f:f5:28:51:70:3f:77:85:91:18:07:fd:23:fa:dc:7a:2e:d7:
6d:2d:13:ce:27:05:98:4e:18:5b:a4:b6:aa:4c:17:0a:13:62:
fc:44:1f:be:e6:a7:4e:56:ca:5b:f6:7d:a6:77:41:17:8b:fa:
1d:13:bc:72:a4:43:5f:43:2b:02:81:2c:af:6b:99:66:0b:a8:
1a:20:44:01:1d:55:c8:0f:e8:a1:dd:f7:c4:33:73:06:d1:0b:
09:eb:2c:bb:c3:55:df:77:d3:3b:99:af:6c:01:0a:f7:9c:73:
93:04:3b:8e:ab:8f:6b:b8:d3:44:60:c6:57:3d:e9:32:93:ef:
f1:14:62:ad:8e:9b:58:63:47:5a:b2:47:ea:fa:03:87:2d:a3:
9b:35:ea:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdk5rri1RWbCRhLlu+nUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDMyM2FkNDhmNWE0NWJiY2E5ZTg3OTg4M2ZhZTkzMTRi
NThlOWQwHhcNMjYwMzI4MDgwMTI0WhcNMjYwMzI5MDgwMTI0WjAzMTEwLwYDVQQD
Eyg4NDFlY2NiYTI3OWI5MmQ3Y2Q2ZjZmNDE4NzJjZjkyYjNiOWYxNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nxGi3OWSWHsUHK/KkVYmeCmYlyu
AMFbwOg/w89OJth9z71uBr46kQxStI+dNdYtpfdk2Hv+65mrAWcbKeB8/z2qx+ix
nTLekOC7j+YfGPrlcVI7ovVRHHmiEDUXnSTawCadbradpfUWIpNMffIR1qOqqOED
uWrFcvkIVVFiJ1BwXTDwavfhRIbh31ICr8t0D88tPBT7RDbZ1KFdz7OKcWNQK7yN
Hle5OYAkIdSljH1QXP0XxXCIg28Gjzl0/Yu8D2DyeuN9g6xXpADixZkhUBeowZac
Rjhn4MPp+UxpXf3mKVx9t4y6HKcVadoTzLJc/2us8r8zaXl6GV567QJFnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQezLonm5LXzW9vQYcs+Ss7nxU1MB8GA1UdIwQY
MBaAFPDTI61I9aRbvKnoeYg/rpMUtY6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTIt
NWZhYmQ2ZGM1ZjkzLzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTItNWZhYmQ2ZGM1Zjkz
LzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFzwmIJK
ZwVwk6+n45Mu7hRnf6VzMJm1476Ls04kO2D++1u4UuUOk4S8ayTxiWXFBtIKj4lD
ifBr3+hIy9QAHfDWmHxkFqTyFmlDLHobnREpCuQWa+XykDMC/fmCvTdWVCLH53wR
KlEKDFrRX/UoUXA/d4WRGAf9I/rcei7XbS0TzicFmE4YW6S2qkwXChNi/EQfvuan
TlbKW/Z9pndBF4v6HRO8cqRDX0MrAoEsr2uZZguoGiBEAR1VyA/ood33xDNzBtEL
Cessu8NV33fTO5mvbAEK95xzkwQ7jquPa7jTRGDGVz3pMpPv8RRirY6bWGNHWrJH
6voDhy2jmzXqeA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:33 2026 by rpki-client